This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa File: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (raw, json) Hash identifier: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ= Subject key identifier: 74:C7:C6:F3:CB:ED:0A:6A:B9:FD:9A:94:7E:43:27:01:2F:29:47:E3 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101F63F014EFFAE9486881EF3B7638 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203363 IP address blocks: 46.37.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:63:f0:14:ef:fa:e9:48:68:81:ef:3b:76:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74c7c6f3cbed0a6ab9fd9a947e4327012f2947e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:8d:c0:d8:2d:33:84:e6:e1:07:7b:79:c5: 6d:e5:32:13:1b:dc:7d:dc:dd:4c:20:7b:34:ad:9a: 8c:57:e5:00:73:7f:37:7b:52:5a:cc:99:f6:ed:de: 30:6e:3d:0f:79:ff:f9:fa:21:c3:f8:dc:79:76:91: a8:68:07:4f:cb:1e:4c:59:d1:d7:f2:bf:d8:5f:0f: 03:f1:f6:57:c4:14:ed:29:d2:9f:17:78:2b:59:63: 8b:14:ce:2b:f3:88:ee:38:62:62:b0:e2:c4:85:07: 41:a2:31:9f:32:88:64:c1:54:4b:ee:c9:80:b0:96: 76:47:2c:e0:34:97:71:d4:96:26:60:b9:8c:f5:46: 6a:50:ed:40:26:f4:12:5c:d8:38:22:5f:b3:7f:db: d7:e3:85:91:14:4a:f3:3b:39:80:8a:50:06:d3:29: 97:59:2f:9b:4f:5e:c7:9e:fb:60:3b:77:47:dd:53: d8:6b:3e:71:6f:99:9d:4b:da:44:cc:79:73:e4:73: 43:a6:8b:cd:f4:f5:d3:60:cd:13:15:24:1a:8f:57: bb:e5:7e:99:1d:8e:ed:42:9a:21:89:ab:80:cb:a3: d7:b9:a9:cc:49:ad:d1:bd:23:e8:e5:74:20:7b:c3: d2:d8:f7:c7:e8:b1:5b:5e:38:52:a1:79:a3:7d:90: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:C6:F3:CB:ED:0A:6A:B9:FD:9A:94:7E:43:27:01:2F:29:47:E3 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.124.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7d:9c:4c:17:99:e1:31:68:e3:12:56:9e:68:f7:51:13:8c: 30:5a:32:d7:e8:31:1e:1c:81:55:93:72:01:21:f8:8a:3a:c5: 19:1e:7a:80:60:14:33:ec:44:61:e9:df:6a:56:30:ca:51:bf: 78:61:a7:3f:4b:20:ee:d8:ee:9c:fd:51:56:8a:30:e8:ca:2e: 72:ef:82:2c:52:89:22:48:1d:c1:e7:fb:c9:d8:73:59:9c:0c: d8:86:97:73:da:d9:10:2f:c2:17:4a:f9:af:94:9e:2c:2c:68: ea:bd:5e:cb:65:c1:05:1f:9c:ec:3a:0f:06:e7:35:58:e9:e4: 96:a5:d3:c9:eb:1b:d8:71:c3:39:78:c8:a9:4b:01:14:2f:cf: 17:3e:68:1c:44:0e:2c:f0:5a:a3:5c:b5:5c:8e:2b:0e:69:83: 49:4e:4b:00:66:10:4b:29:e4:e1:a3:d7:f7:fb:cc:90:76:a8: 15:de:3b:6b:dc:b4:5a:d2:05:56:73:9d:e4:c9:36:c8:95:1e: b0:6c:f6:14:1c:07:d0:54:d6:7f:c1:3c:67:81:b0:70:15:c8: 91:43:c5:64:4a:fa:46:fc:9a:9e:9a:d3:ad:6d:ce:3b:14:9c: d9:12:ae:96:2c:2d:83:e1:b6:fc:e1:88:11:a4:01:4c:c2:0d: 95:6b:a5:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB9j8BTv+ulIaIHvO3Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGM3YzZmM2NiZWQwYTZhYjlmZDlhOTQ3ZTQzMjcwMTJmMjk0N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1WNwNgtM4Tm4Qd7ecVt5TITG9x9 3N1MIHs0rZqMV+UAc383e1JazJn27d4wbj0Pef/5+iHD+Nx5dpGoaAdPyx5MWdHX 8r/YXw8D8fZXxBTtKdKfF3grWWOLFM4r84juOGJisOLEhQdBojGfMohkwVRL7smA sJZ2RyzgNJdx1JYmYLmM9UZqUO1AJvQSXNg4Il+zf9vX44WRFErzOzmAilAG0ymX WS+bT17HnvtgO3dH3VPYaz5xb5mdS9pEzHlz5HNDpovN9PXTYM0TFSQaj1e75X6Z HY7tQpohiauAy6PXuanMSa3RvSPo5XQge8PS2PfH6LFbXjhSoXmjfZCBZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHTHxvPL7Qpquf2alH5DJwEvKUfjMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvZE1mRzg4dnRDbXE1X1pxVWZrTW5BUzhwUi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV8MA0G CSqGSIb3DQEBCwUAA4IBAQCTfZxMF5nhMWjjElaeaPdRE4wwWjLX6DEeHIFVk3IB IfiKOsUZHnqAYBQz7ERh6d9qVjDKUb94Yac/SyDu2O6c/VFWijDoyi5y74IsUoki SB3B5/vJ2HNZnAzYhpdz2tkQL8IXSvmvlJ4sLGjqvV7LZcEFH5zsOg8G5zVY6eSW pdPJ6xvYccM5eMipSwEUL88XPmgcRA4s8FqjXLVcjisOaYNJTksAZhBLKeTho9f3 +8yQdqgV3jtr3LRa0gVWc53kyTbIlR6wbPYUHAfQVNZ/wTxngbBwFciRQ8VkSvpG /JqemtOtbc47FJzZEq6WLC2D4bb84YgRpAFMwg2Va6Xt -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:06 2026 by rpki-client